Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/ae5ceed2-3fa3-3ab3-8256-0392de9272f6.roa
File:                     ae5ceed2-3fa3-3ab3-8256-0392de9272f6.roa (raw, json)
Hash identifier:          MF28l/n8Y4rZI75z5pS7qlSYpwPaERg+Le7wGji/20U=
Subject key identifier:   BB:B1:C9:D4:F0:61:C5:13:60:0D:A9:1C:9B:FC:A3:82:DC:06:62:77
Certificate issuer:       /CN=e25d686e-0b40-4450-bc73-6a20b06135f1
Certificate serial:       010D0C9F432858377ACE9487270F038D0C0079C0
Authority key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/ae5ceed2-3fa3-3ab3-8256-0392de9272f6.roa
Signing time:             Thu 01 Oct 2020 04:00:00 +0000
ROA not before:           Thu 01 Oct 2020 04:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     3356
IP address blocks:        208.90.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:7a:ce:94:87:27:0f:03:8d:0c:00:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25d686e-0b40-4450-bc73-6a20b06135f1
        Validity
            Not Before: Oct  1 04:00:00 2020 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=346e4067-a6af-4a9c-83ca-0829f394bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:a9:2e:e1:ac:2d:f0:13:5f:bb:70:14:68:
                    41:6a:53:60:4e:ab:b6:03:6f:ef:e1:2a:88:41:8e:
                    fc:2d:08:19:97:15:68:3f:6d:d0:6c:44:37:1d:2e:
                    38:eb:50:09:54:3b:f8:1d:c6:57:cf:c0:80:80:dc:
                    69:e5:85:36:3d:bb:83:9f:c9:12:62:29:c6:27:59:
                    8d:17:08:be:90:e1:e8:39:09:1b:69:63:4b:9b:1f:
                    ad:e2:2c:68:34:dc:7e:da:dc:5b:0a:58:2c:da:f6:
                    ac:15:5f:0f:d1:02:d9:da:80:38:a3:74:03:3f:dc:
                    92:be:df:43:3d:5b:ad:b2:c2:83:b9:7e:b2:bc:58:
                    16:b8:19:cc:91:01:0e:dd:69:08:40:0d:97:1c:62:
                    46:4b:1e:74:75:3f:5c:c1:10:48:9f:58:25:43:aa:
                    3f:93:10:e5:81:e6:ad:7a:4f:ae:46:2a:a6:f5:ea:
                    34:94:8e:3b:41:32:19:e8:bb:fa:63:20:c4:9c:98:
                    88:ac:1e:40:c1:62:3e:2d:eb:bd:c7:02:75:b7:20:
                    8e:85:7a:26:b6:49:77:44:db:33:59:96:18:09:90:
                    41:85:b1:b0:f6:22:0c:68:56:5f:5d:d9:9f:3e:27:
                    ce:fd:e9:5c:2b:4c:63:7c:f3:93:69:45:58:1a:e9:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:C9:D4:F0:61:C5:13:60:0D:A9:1C:9B:FC:A3:82:DC:06:62:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/ae5ceed2-3fa3-3ab3-8256-0392de9272f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl

            X509v3 Authority Key Identifier:
                keyid:C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:09:01:f0:6f:46:45:51:c0:a7:04:55:eb:cc:1e:3a:2c:b1:
         55:85:c9:1d:a3:ba:08:d7:e4:80:f4:6e:b9:25:85:8f:00:18:
         74:b4:f8:32:d0:b1:68:27:22:3c:8f:6c:86:d7:c2:f5:a3:54:
         ac:fc:af:b1:6d:d7:49:18:93:71:95:fc:1a:14:8f:8e:df:58:
         9b:4c:09:31:d8:76:7a:89:48:5f:bd:0d:aa:c0:0f:77:a7:e2:
         75:81:c1:3e:39:79:41:18:f0:d3:1a:9a:8f:b7:f6:80:89:8d:
         91:d3:59:68:4d:de:9b:7b:4a:fd:58:e5:be:4f:db:cf:16:24:
         1f:a9:00:e9:48:c1:3a:8f:89:97:88:3a:ad:d6:c0:b4:45:49:
         d4:e8:f3:f3:2b:d5:81:25:ec:6c:70:99:1c:39:d5:68:27:72:
         8f:3a:12:08:e4:6c:ed:19:81:d9:85:3d:b4:29:75:20:45:71:
         8f:7c:de:92:65:00:e8:7e:e9:17:4b:47:2e:21:c7:af:31:71:
         aa:bc:8a:cf:ab:d3:34:ef:02:61:e8:3d:77:ee:37:11:12:41:
         00:2a:ac:e6:57:6d:df:3a:a4:96:e5:8f:f2:80:30:2f:84:6b:
         18:38:56:6a:f0:85:45:83:20:03:21:4c:cf:7a:8d:ee:2b:78:
         5b:d6:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:23 2023 by rpki-client on console-ams.rpki-client.org